About the role
Our client is seeking a Head of Information Security Officer to lead its cybersecurity strategy and program. You will be responsible for establishing and leading the enterprise vision, strategy and program to protect information assets and technologies, ensuring adherence to security best practices, regulatory compliance, risk management and incident response preparedness. The role is central to driving a culture of security awareness and accountability across the organisation.
Key responsibilities
Strategic leadership
- Develop and execute a holistic cybersecurity strategy aligned with business goals
- Lead development and implementation of global information security policies, standards and procedures
- Serve as a key advisor to executive leadership on cybersecurity matters
Governance, risk and compliance
- Own the enterprise-wide information risk management program
- Ensure compliance with applicable regulations, industry standards and internal policy (frameworks such as NIST CSF, ISO 27001, GDPR)
- Lead internal and external security audits, assessments and regulatory reviews
Security operations and incident response
- Oversee day-to-day monitoring and protection of information systems
- Lead the security operations centre, threat detection and response activities
- Establish and manage incident response plans and crisis communication protocols
Architecture and technology oversight
- Define secure architecture standards and embed security into solution design and delivery
- Guide adoption of zero-trust principles, cloud security and modern access control (SASE, IAM)
- Oversee selection and implementation of security tools (SIEM, vulnerability management, DLP, and similar)
Team leadership and culture
- Build, lead and develop a high-performing cybersecurity team with clear accountability and strong operating rhythms
- Foster a culture of security awareness and ownership across the business
- Produce consistently CxO-ready analysis, recommendations and executive materials
Vendor and third-party risk management
- Lead evaluation and monitoring of third-party vendor security posture
- Define and enforce security requirements in procurement and outsourcing contracts
Candidate requirements
- Bachelor's or master's degree in a relevant field
- CISSP, CISM, CISA or CCISO strongly preferred
- 10-15+ years of progressively senior cybersecurity or IT risk leadership experience
- Experience leading enterprise-wide cybersecurity programs in global, complex environments
- Proven crisis management and recovery experience during cyber incidents
- Deep understanding of modern security architecture, cloud/hybrid environments and compliance standards
- Strong communicator and relationship builder who inspires trust and confidence across the business
- A leader who nurtures and grows high-performing teams
